From e91c4a82528ed4dcd2356c6cd825a4b597c5fad7 Mon Sep 17 00:00:00 2001 From: Emmanuel Seyman Date: Fri, 25 Jul 2014 10:38:42 +0200 Subject: [PATCH 1/6] Update to 4.4.5 --- .gitignore | 1 + bugzilla.spec | 8 +++++++- sources | 2 +- 3 files changed, 9 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index a043ae8..9f42168 100644 --- a/.gitignore +++ b/.gitignore @@ -19,3 +19,4 @@ bugzilla-3.6.1.tar.gz /bugzilla-4.2.7.tar.gz /bugzilla-4.2.9.tar.gz /bugzilla-4.4.4.tar.gz +/bugzilla-4.4.5.tar.gz diff --git a/bugzilla.spec b/bugzilla.spec index 1e5ce50..2495563 100644 --- a/bugzilla.spec +++ b/bugzilla.spec @@ -4,7 +4,7 @@ Summary: Bug tracking system URL: http://www.bugzilla.org/ Name: bugzilla -Version: 4.4.4 +Version: 4.4.5 Group: Applications/Publishing Release: 1%{?dist} License: MPLv1.1 @@ -108,6 +108,9 @@ rm -f Bugzilla/Constants.pm.orig rm -f Bugzilla/Install/Requirements.pm.orig # Remove bundled libs rm -rf lib/CGI* +# these files are only used for testing Bugzilla code +# see https://bugzilla.mozilla.org/show_bug.cgi?id=995209 +rm Build.PL MANIFEST.SKIP # Deal with changing /usr/local paths here instead of via patches %{__perl} -pi -e 's|/usr/local/bin/python\b|%{__python}|' contrib/*.py @@ -221,6 +224,9 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm %changelog +* Fri Jul 25 2014 Emmanuel Seyman - 4.4.5-1 +- Update to 4.4.5 which fixes a security bug (CVE-2014-1546) + * Mon Jul 07 2014 Emmanuel Seyman - 4.4.4-1 - Update to 4.4.4 diff --git a/sources b/sources index b61f9a6..47f4042 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -234ee253eed5a38707c4d53f1124a85a bugzilla-4.4.4.tar.gz +077c123ea9659ccbf76bb35ce951324b bugzilla-4.4.5.tar.gz From edaa528eadeb31b82cf7c7c364a42e21eecd0798 Mon Sep 17 00:00:00 2001 From: Emmanuel Seyman Date: Wed, 8 Oct 2014 08:07:08 +0200 Subject: [PATCH 2/6] Update to 4.4.6 --- .gitignore | 1 + bugzilla.spec | 5 ++++- sources | 2 +- 3 files changed, 6 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 9f42168..1f2d404 100644 --- a/.gitignore +++ b/.gitignore @@ -20,3 +20,4 @@ bugzilla-3.6.1.tar.gz /bugzilla-4.2.9.tar.gz /bugzilla-4.4.4.tar.gz /bugzilla-4.4.5.tar.gz +/bugzilla-4.4.6.tar.gz diff --git a/bugzilla.spec b/bugzilla.spec index 2495563..f37e0ee 100644 --- a/bugzilla.spec +++ b/bugzilla.spec @@ -4,7 +4,7 @@ Summary: Bug tracking system URL: http://www.bugzilla.org/ Name: bugzilla -Version: 4.4.5 +Version: 4.4.6 Group: Applications/Publishing Release: 1%{?dist} License: MPLv1.1 @@ -224,6 +224,9 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm %changelog +* Wed Oct 08 2014 Emmanuel Seyman - 4.4.6-1 +- Update to 4.4.6 + * Fri Jul 25 2014 Emmanuel Seyman - 4.4.5-1 - Update to 4.4.5 which fixes a security bug (CVE-2014-1546) diff --git a/sources b/sources index 47f4042..b71ddb2 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -077c123ea9659ccbf76bb35ce951324b bugzilla-4.4.5.tar.gz +3e0553c67cbe33f8ae12dfe79a02ecdc bugzilla-4.4.6.tar.gz From c1f895738807b770d9f3ed29b131d7683d1d2d11 Mon Sep 17 00:00:00 2001 From: Emmanuel Seyman Date: Sat, 31 Jan 2015 22:34:12 +0100 Subject: [PATCH 3/6] - Update to 4.4.8 (fixes regressions in 4.4.7 which itself fixed security flaws) (CVE-2014-1571, CVE-2014-8630) - Remove bundled binary files (#1000245) - Add webdot directory perms to apache configuration --- bugzilla-httpd-conf | 4 ++++ bugzilla.spec | 10 +++++++++- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/bugzilla-httpd-conf b/bugzilla-httpd-conf index 45ec051..1ed7679 100644 --- a/bugzilla-httpd-conf +++ b/bugzilla-httpd-conf @@ -17,3 +17,7 @@ Alias /bugzilla /usr/share/bugzilla AddType application/vnd.mozilla.xul+xml .xul AddType application/rdf+xml .rdf + + + Require all granted + diff --git a/bugzilla.spec b/bugzilla.spec index f37e0ee..ade8a7f 100644 --- a/bugzilla.spec +++ b/bugzilla.spec @@ -4,7 +4,7 @@ Summary: Bug tracking system URL: http://www.bugzilla.org/ Name: bugzilla -Version: 4.4.6 +Version: 4.4.8 Group: Applications/Publishing Release: 1%{?dist} License: MPLv1.1 @@ -108,6 +108,8 @@ rm -f Bugzilla/Constants.pm.orig rm -f Bugzilla/Install/Requirements.pm.orig # Remove bundled libs rm -rf lib/CGI* +# Remove bundled binary files +rm -f js/yui/*/*.swf # these files are only used for testing Bugzilla code # see https://bugzilla.mozilla.org/show_bug.cgi?id=995209 rm Build.PL MANIFEST.SKIP @@ -224,6 +226,12 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm %changelog +* Sat Jan 31 2015 Emmanuel Seyman - 4.4.8-1 +- Update to 4.4.8 (fixes regressions in 4.4.7 which itself + fixed security flaws) (CVE-2014-1571, CVE-2014-8630) +- Remove bundled binary files (#1000245) +- Add webdot directory perms to apache configuration + * Wed Oct 08 2014 Emmanuel Seyman - 4.4.6-1 - Update to 4.4.6 From c1d017aa868bd81b515cca7bd84685826b1a9668 Mon Sep 17 00:00:00 2001 From: Emmanuel Seyman Date: Sat, 31 Jan 2015 23:09:52 +0100 Subject: [PATCH 4/6] Use the correct sources --- .gitignore | 1 + sources | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 1f2d404..d638e66 100644 --- a/.gitignore +++ b/.gitignore @@ -21,3 +21,4 @@ bugzilla-3.6.1.tar.gz /bugzilla-4.4.4.tar.gz /bugzilla-4.4.5.tar.gz /bugzilla-4.4.6.tar.gz +/bugzilla-4.4.8.tar.gz diff --git a/sources b/sources index b71ddb2..b0f7553 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -3e0553c67cbe33f8ae12dfe79a02ecdc bugzilla-4.4.6.tar.gz +86aed922fc99aee0498f864f18d9be96 bugzilla-4.4.8.tar.gz From 0cb68775a81bff692e05f87cf89ce79ec61cf9e3 Mon Sep 17 00:00:00 2001 From: Emmanuel Seyman Date: Sat, 31 Jan 2015 23:14:44 +0100 Subject: [PATCH 5/6] Use the correct sources --- bugzilla.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/bugzilla.spec b/bugzilla.spec index ade8a7f..98e9f1d 100644 --- a/bugzilla.spec +++ b/bugzilla.spec @@ -6,7 +6,7 @@ URL: http://www.bugzilla.org/ Name: bugzilla Version: 4.4.8 Group: Applications/Publishing -Release: 1%{?dist} +Release: 1%{?dist}.1 License: MPLv1.1 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz Source1: bugzilla-httpd-conf @@ -226,6 +226,9 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm %changelog +* Sat Jan 31 2015 Emmanuel Seyman - 4.4.8-1.1 +- Include correct sources + * Sat Jan 31 2015 Emmanuel Seyman - 4.4.8-1 - Update to 4.4.8 (fixes regressions in 4.4.7 which itself fixed security flaws) (CVE-2014-1571, CVE-2014-8630) From e59bfd5003389db2f9fa34337bcf1625af6def4e Mon Sep 17 00:00:00 2001 From: Emmanuel Seyman Date: Sun, 13 Sep 2015 17:24:00 +0200 Subject: [PATCH 6/6] Update to 4.4.10 --- .gitignore | 1 + bugzilla.spec | 12 ++++++++---- sources | 2 +- 3 files changed, 10 insertions(+), 5 deletions(-) diff --git a/.gitignore b/.gitignore index d638e66..b874aa5 100644 --- a/.gitignore +++ b/.gitignore @@ -22,3 +22,4 @@ bugzilla-3.6.1.tar.gz /bugzilla-4.4.5.tar.gz /bugzilla-4.4.6.tar.gz /bugzilla-4.4.8.tar.gz +/bugzilla-4.4.10.tar.gz diff --git a/bugzilla.spec b/bugzilla.spec index 98e9f1d..3590aeb 100644 --- a/bugzilla.spec +++ b/bugzilla.spec @@ -4,9 +4,9 @@ Summary: Bug tracking system URL: http://www.bugzilla.org/ Name: bugzilla -Version: 4.4.8 +Version: 4.4.10 Group: Applications/Publishing -Release: 1%{?dist}.1 +Release: 1%{?dist} License: MPLv1.1 Source0: http://ftp.mozilla.org/pub/mozilla.org/webtools/bugzilla-%{version}.tar.gz Source1: bugzilla-httpd-conf @@ -147,6 +147,7 @@ mkdir -p ${RPM_BUILD_ROOT}/%{bzdatadir} mkdir -p ${RPM_BUILD_ROOT}/%{_sysconfdir}/bugzilla install -m 0644 -D -p %{SOURCE1} ${RPM_BUILD_ROOT}%{_sysconfdir}/httpd/conf.d/bugzilla.conf install -m 0755 -D -p %{SOURCE3} ${RPM_BUILD_ROOT}%{bzinstallprefix}/bugzilla/cron.daily +rm ${RPM_BUILD_ROOT}%{bzinstallprefix}/bugzilla/LICENSE %post (pushd %{bzinstallprefix}/bugzilla > /dev/null @@ -159,6 +160,7 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/*.pl %{bzinstallprefix}/bugzilla/Bugzilla.pm %{bzinstallprefix}/bugzilla/robots.txt +%{bzinstallprefix}/bugzilla/taskgraph.json %{bzinstallprefix}/bugzilla/Bugzilla %{bzinstallprefix}/bugzilla/extensions %{bzinstallprefix}/bugzilla/images @@ -175,6 +177,7 @@ popd > /dev/null) %defattr(-,root,root,-) %doc README %doc README.fedora +%license LICENSE %dir %{bzdatadir} %defattr(0750,root,apache,-) %dir %{_sysconfdir}/bugzilla @@ -226,8 +229,9 @@ popd > /dev/null) %{bzinstallprefix}/bugzilla/contrib/Bugzilla.pm %changelog -* Sat Jan 31 2015 Emmanuel Seyman - 4.4.8-1.1 -- Include correct sources +* Sun Sep 13 2015 Emmanuel Seyman - 4.4.10-1 +- Update to 4.4.10 +- Use %%license to flag the LICENSE file * Sat Jan 31 2015 Emmanuel Seyman - 4.4.8-1 - Update to 4.4.8 (fixes regressions in 4.4.7 which itself diff --git a/sources b/sources index b0f7553..a849a30 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -86aed922fc99aee0498f864f18d9be96 bugzilla-4.4.8.tar.gz +c0490b7461a0d6520d118c720e1c3f37 bugzilla-4.4.10.tar.gz